Date: Mon, 12 Jan 2009 23:00:03 GMT From: "Philip M. Gollucci" <pgollucci@freebsd.org> To: apache@FreeBSD.org Subject: Re: ports/130179: [PATCH] www/apache22: Enable passing HTTP 'Authorization' headers as compile time option Message-ID: <200901122300.n0CN03bS038681@freefall.freebsd.org>
index | next in thread | raw e-mail
The following reply was made to PR ports/130179; it has been noted by GNATS.
From: "Philip M. Gollucci" <pgollucci@freebsd.org>
To: bug-followup@FreeBSD.org, wens@csie.org
Cc:
Subject: Re: ports/130179: [PATCH] www/apache22: Enable passing HTTP 'Authorization'
headers as compile time option
Date: Mon, 12 Jan 2009 17:55:29 -0500
with HTTPD PMC hat:
This is actually going to be removed and *possibly* replaced with a
run-time option.
With that in mind, I don't think we should add this, as it actually is a
security concern.
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200901122300.n0CN03bS038681>